We are an event based organization, and our 90+ employees often donate throughout the year. Currently their personal information and donor history are available to those with general Contact and Account access.
I'm trying to identify a solution that would allow me to mask this information for all outside of system administrators. I considered a new record type with associated filters, but I've been told that may soon be a legacy feature and I'd rather input something more concrete.
Any help is much appreciated! #Security
@Andrew Thompson , We did something similar to this a few years ago. Management wanted SF to allow users to see their own Contacts’ donations, but make the donations from those individuals on staff not visible, except to users with SysAdmin profile. Here’s what worked for us.
· We set it up so that by default the Donation Owner is set to the Donor (in the case where the donor is on staff as a SF user) or the Donor's Primary Contact (if it is filled in and it corresponds to a SF user). At that time, I did it using Process Builder, but obviously you’d do it in Flow today. (I have screenshots saved if interested.)
· Set the Org-wide Default for Opportunities to Private.
· Create an Opportunity Sharing Rule called “Non-Donation Opps”, to Allow Read/Write access to all Opp Record Types that are NOT Individual Donations, for all users.
· Later, we did the same for Recurring Donation/Pledge object.
· I suppose you could also do the same thing for the Contact object.
